Back github.com

Kwstubbs

github.com • September 28, 2026

Share: View original

userlandrootkit userlandrootkit Public Malicious Linux Library Used as Userland Rootkit C 4 3

Malicious Linux Library Used as Userland Rootkit

kernelrootkit kernelrootkit Public A Linux kernel module that gives elevated priviledges C 2

A Linux kernel module that gives elevated priviledges

UselessMach UselessMach Public Practice with Mach ports and messages - send a string from a task to the task port and back C 1

Practice with Mach ports and messages - send a string from a task to the task port and back

codeql codeql Public Forked from github/codeql CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise CodeQL 1

Forked from github/codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

localGPT localGPT Public Forked from PromtEngineer/localGPT Chat with your documents on your local device using GPT models. No data leaves your device and 100% private. Python 1

Forked from PromtEngineer/localGPT

Chat with your documents on your local device using GPT models. No data leaves your device and 100% private.

RustIntro RustIntro Public Some Practice Code From the Rust Documentation Rust

Some Practice Code From the Rust Documentation

There was an error while loading. Please reload this page .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GitHub AI Agent Discovers 24 Vulnerabilities in Android Apps GitHub Security Lab's AI-driven Taskflow Agent identified over 20 vulnerabilities in Android applications, including critical issues in popular apps like OsmAnd and the Wikipedia app. The vulnerabilities stem from improper handling of intent extras and hostname checks, allowing potential exploitation by malicious actors. The AI model, while effective in finding vulnerabilities, struggled with accurately assessing their severity, necessitating human review before any findings are acted upon. The taskflows are open source and can be run against any repository, but require a GitHub Copilot license. The vulnerabilities were disclosed on September 28, 2026, and are significant due to their potential impact on millions of users. The vulnerabilities are not yet confirmed to be actively exploited in the wild. 2 sources 42

Extracted Entities

Kwstubbs

The full story

Extracted Entities

Attack Types (1)

Domains (1)

Platforms (1)

Tools (1)